Privacy Policy KDM108 – Our Commitment to Protecting Your Data

This Privacy Policy is issued by kdm108 and applies to all users who access or use our platform via the website kdm108.net as well as the kdm108 mobile app for Android and iOS.

This document transparently explains the types of personal data we collect, how that data is used, the limited circumstances under which it may be shared, and the rights you hold over your personal data.

User privacy is something we take seriously. Since kdm108 was established, we have built data management systems and procedures designed not just to meet legal obligations, but to genuinely protect the interests of every member of our community.

KDM108 only collects data that is strictly necessary to operate its services, ensure account security, and meet regulatory obligations. The following are the categories of data we collect:

Data is collected through several different methods, depending on the type of data and the context in which it is used:

• Directly from you: when registering an account, completing your profile, undergoing identity verification (KYC), contacting customer support, or setting account preferences.
• Automatically from your device: technical data such as IP address, browser type, operating system, and session data are automatically collected when you access our platform.
• Via cookies and similar technologies: to remember session preferences, analyze usage patterns, and improve platform performance. See section 7 for more details on cookies.
• From third-party service providers: in certain cases, identity verification data may be processed through our appointed KYC service provider — this process is subject to that provider's privacy policy, which we have evaluated for compliance.

KDM108 uses collected data only for legitimate, relevant, and proportionate purposes. The primary purposes for data use include:

• Account operations: creating and managing your account, processing logins, and ensuring secure access to all platform features.
• Transaction processing: processing deposits, withdrawals, and all other financial activities accurately and securely.
• Identity verification (KYC): ensuring that every user is a real individual who meets the age requirements and is not listed on any applicable exclusion lists.
• Platform security: detecting and preventing fraud, unauthorized access, money laundering, and other illegal activities.
• Service improvement: analyzing aggregated usage patterns to improve platform performance, interface, and features.
• Service communications: sending important notifications regarding your account, transactions, terms updates, and security information.
• Promotional communications: only if you have given your consent may we send you information about promotions and special offers. You may unsubscribe at any time.

KDM108 does not sell, rent, or share users' personal data with third parties for commercial purposes. However, there are limited circumstances under which data may be shared:

• Technical service providers: technology partners who help operate the platform infrastructure (such as payment processing or KYC services) may access relevant data on a limited basis and are bound by strict confidentiality agreements.
• Legal authorities: KDM108 will disclose data to law enforcement authorities or regulatory bodies only when required by applicable law, pursuant to a valid court order, or in the context of an official criminal investigation.
• Protection of kdm108's rights: in situations where it is necessary to enforce our terms and conditions, prevent fraud, or protect the safety of other users and the integrity of the platform.

KDM108 implements comprehensive technical and organizational measures to protect users' personal data from unauthorized access, misuse, loss, or damage.

• Data encryption in transit: all communications between your device and kdm108 servers are encrypted using SSL/TLS protocols with validated certificates.
• Data encryption at rest: sensitive information such as financial details and identity documents is stored in encrypted form on our servers.
• Internal access controls: only employees and contractors with a legitimate business need may access user data, with access monitored and logged on a regular basis.
• 24/7 security monitoring: an active threat detection system monitors suspicious activity in real time and responds to incidents automatically.
• Regular penetration testing: KDM108 regularly conducts independent security testing (penetration testing) to identify and remediate potential vulnerabilities.

While we uphold high security standards, no system is 100% immune to threats. In the event of a data security incident affecting your account, kdm108 is committed to notifying you as promptly as possible in accordance with applicable regulations.

KDM108 uses cookies and similar technologies to enhance the user experience and analyze platform performance. The following are the types of cookies we use:

• Essential cookies: required for core platform functions such as session authentication and security. These cookies cannot be disabled as they are fundamental to the operation of the service.
• Performance cookies: collecting anonymous data on how users interact with the platform to help us identify areas for improvement.
• Preference cookies: storing your preferences such as language, display settings, and interface choices so they do not need to be reconfigured each session.

You can manage your cookie preferences through your browser or device settings. However, disabling essential cookies may significantly affect account functionality and security.

KDM108 retains personal data only for as long as necessary for the purposes outlined in this policy, or as required by applicable legal obligations.

• Active account data is retained for as long as the account remains active, plus any additional period required by regulation after account closure (typically 5–7 years for financial records).
• Technical session data and security logs are retained for 90 days for incident investigation and security audit purposes.
• Non-financial user preference and settings data may be deleted early upon user request.

Once the retention period expires or a valid deletion request has been processed, data will be securely deleted using methods that ensure it cannot be recovered.

In the course of its operations, KDM108 may transfer user data to servers or service partners located outside Indonesia. All international data transfers are carried out with protections equal to or exceeding domestic data protection standards.

The steps we take to securely transfer data include:

• Ensuring that destination countries maintain an adequate level of data protection.
• Implementing data processing agreements that include standard protection clauses with all international partners.
• Encrypting data before and during the transfer process.

As a kdm108 user, you have the following rights over your personal data, which you may exercise at any time:

• Right to Access: you have the right to know what data we hold about you and how it is used.
• Right to Correction: if any data is inaccurate or incomplete, you may request an update or correction at any time.
• Right to Erasure: under certain conditions, you may request the deletion of your personal data — unless we are legally required to retain it.
• Right to Restrict Processing: you may request that we restrict the processing of your data under certain conditions, for example while the accuracy of the data is being disputed.
• Right to Data Portability: you have the right to receive a copy of your personal data in a structured, machine-readable format.
• Right to Object: you may object to the processing of your data for specific purposes, including promotional communications.

To exercise any of the rights above, contact the kdm108 support team via 24/7 live chat available in our app or website. All requests will be responded to within 30 calendar days.

KDM108 may update this privacy policy from time to time to reflect changes in our data management practices, service updates, or applicable regulatory changes.

For significant changes, we will notify you via:

• Push notifications in the kdm108 app at least 7 days before changes take effect.
• Announcements on the kdm108.net homepage.
• Email the address registered to your account.

The last updated date is always displayed at the top of this page. Continued use of kdm108's services after changes take effect constitutes acceptance of the latest version of the privacy policy.

If you have any questions, concerns, or requests regarding this privacy policy or the handling of your personal data, we invite you to reach out to the KDM108 team through the following channels:

• Live Chat: available 24/7 directly in the kdm108 app or via the live chat button on kdm108.net — the fastest way to get a response.
• Email: send your inquiry to [email protected] — privacy-related inquiries will be handled by our dedicated team within 3 business days.

Our privacy team is committed to handling every inquiry seriously, responsively, and with full respect for the interests of our users.